Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NujFgbT1yFbtzmzWKPHmFZAwPTw.roa
File: NujFgbT1yFbtzmzWKPHmFZAwPTw.roa (raw, json)
Hash identifier: 0LYHOKlVxgFS+l7/HDh2kTFMx7fFC+uDoCSJXQUi9gA=
Subject key identifier: 36:E8:C5:81:B4:F5:C8:56:ED:CE:6C:D6:28:F1:E6:15:90:30:3D:3C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A08ABC2A90D28F5E1D1E2380028FBF1599
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NujFgbT1yFbtzmzWKPHmFZAwPTw.roa
Signing time: Thu 10 Sep 2026 09:53:02 +0000
ROA not before: Thu 10 Sep 2026 09:53:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206264
IP address blocks: 151.240.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:bc:2a:90:d2:8f:5e:1d:1e:23:80:02:8f:bf:15:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 10 09:53:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36e8c581b4f5c856edce6cd628f1e61590303d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ea:1c:19:5e:48:70:32:42:8e:a8:f1:ba:8c:
0a:2b:6b:eb:3d:33:e3:59:57:23:c5:2e:9a:c5:cb:
63:b7:93:b0:fc:2d:80:f4:7b:8a:a5:b9:a4:7e:fc:
a4:b9:03:2a:6f:c7:22:c8:00:f2:86:b4:11:d0:e0:
69:93:8b:e5:cf:08:5a:5e:81:d6:db:9c:12:6f:c8:
4b:60:f1:cf:6d:4d:84:37:5b:24:af:9d:31:b5:f7:
2e:1f:a6:55:19:19:f6:ad:18:1b:3a:b8:26:3b:b8:
f3:07:8b:0d:c7:e6:e7:20:fe:b4:88:5a:3d:69:3f:
82:be:5f:7b:79:c8:4d:3a:b4:fa:ec:cf:df:39:b2:
ff:4c:a0:ae:b6:4b:85:32:95:50:27:70:b3:d0:de:
26:d3:5e:6a:b7:e0:df:26:c2:8a:ed:11:ba:19:73:
4c:f0:aa:24:bc:5f:9c:bf:12:ec:63:54:b8:40:85:
20:0f:72:b5:c7:4e:ab:02:db:3b:8f:83:71:3c:19:
8e:c7:95:23:1a:53:41:12:10:25:b7:e7:ac:4f:c5:
cf:4b:93:49:a6:55:46:23:09:44:7c:f7:b1:d3:c9:
40:ef:2f:ff:5f:70:fe:e5:cf:dc:50:5a:0c:e4:33:
8c:99:ac:26:9f:c4:12:32:91:8b:53:4e:cb:ff:93:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E8:C5:81:B4:F5:C8:56:ED:CE:6C:D6:28:F1:E6:15:90:30:3D:3C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NujFgbT1yFbtzmzWKPHmFZAwPTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.147.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d8:31:92:64:0b:ad:75:36:ed:07:7a:5a:cc:f2:48:df:14:
0e:e9:da:46:99:ed:5a:32:26:8a:c2:d6:21:59:79:6a:dc:c8:
19:bc:2b:9d:c5:13:d1:33:f8:80:41:7c:ad:7d:b6:d3:0b:e5:
5e:45:71:ab:34:f3:7e:b6:6c:d6:0e:38:01:88:e6:d2:ed:61:
9a:6f:fd:63:ae:79:00:a5:f5:bb:1c:31:31:09:4a:e4:1d:3e:
8a:dc:dc:a8:14:ea:af:4b:d6:18:d4:df:ac:6c:3e:aa:f3:e1:
ee:4b:b9:f2:30:a1:92:f4:84:40:dd:1f:82:de:7a:93:b4:25:
61:62:0b:a3:b3:b4:79:1a:6b:3e:ca:c4:71:73:84:3a:2c:60:
b9:34:f3:72:25:5b:94:5e:7c:fe:b4:96:bc:80:1b:c4:fc:9e:
71:f5:2e:f1:ad:00:6d:41:22:8d:da:06:8c:31:90:92:9e:94:
00:08:6f:55:2e:6e:de:c8:0b:22:b2:ab:b1:aa:d7:30:b2:b7:
54:81:a7:69:a7:1c:2a:5d:f1:24:b6:21:f7:6c:94:09:3b:85:
a6:35:48:3c:9e:b5:dd:a2:d0:f9:ed:cf:12:d5:c7:7b:be:bd:
0d:07:e1:30:d9:f9:9f:8d:c8:d3:4e:fd:ef:82:1c:23:6f:34:
2f:0b:d3:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCKvCqQ0o9eHR4jgAKPvxWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTEwMDk1MzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmU4YzU4MWI0ZjVjODU2ZWRjZTZjZDYyOGYxZTYxNTkwMzAzZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+ocGV5IcDJCjqjxuowKK2vrPTPj
WVcjxS6axctjt5Ow/C2A9HuKpbmkfvykuQMqb8ciyADyhrQR0OBpk4vlzwhaXoHW
25wSb8hLYPHPbU2EN1skr50xtfcuH6ZVGRn2rRgbOrgmO7jzB4sNx+bnIP60iFo9
aT+Cvl97echNOrT67M/fObL/TKCutkuFMpVQJ3Cz0N4m015qt+DfJsKK7RG6GXNM
8KokvF+cvxLsY1S4QIUgD3K1x06rAts7j4NxPBmOx5UjGlNBEhAlt+esT8XPS5NJ
plVGIwlEfPex08lA7y//X3D+5c/cUFoM5DOMmawmn8QSMpGLU07L/5NzNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDboxYG09chW7c5s1ijx5hWQMD08MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvTnVqRmdiVDF5RmJ0em16V0tQSG1GWkF3UFR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/CTMA0G
CSqGSIb3DQEBCwUAA4IBAQAN2DGSZAutdTbtB3pazPJI3xQO6dpGme1aMiaKwtYh
WXlq3MgZvCudxRPRM/iAQXytfbbTC+VeRXGrNPN+tmzWDjgBiObS7WGab/1jrnkA
pfW7HDExCUrkHT6K3NyoFOqvS9YY1N+sbD6q8+HuS7nyMKGS9IRA3R+C3nqTtCVh
Ygujs7R5Gms+ysRxc4Q6LGC5NPNyJVuUXnz+tJa8gBvE/J5x9S7xrQBtQSKN2gaM
MZCSnpQACG9VLm7eyAsisquxqtcwsrdUgadppxwqXfEktiH3bJQJO4WmNUg8nrXd
otD57c8S1cd7vr0NB+Ew2fmfjcjTTv3vghwjbzQvC9Pl
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:52:55 2026 by rpki-client